Server side request forgery (ssrf)

The Ping function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping...

Server-side Request Forgery (SSRF)

Overview github.com/goharbor/harbor/src/core/api is a cloud native registry project that stores, signs, and scans content. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. The Ping function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the...

CVE-2017-17697

The Ping function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping...

CVE-2017-17697

The Ping function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping...

CVE-2017-17697

The Ping function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping...

CVE-2017-17697

The Ping function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping...

CVE-2017-17697

Harbor (ui/api/target.go) has an SSRF vulnerability in Ping() via the endpoint parameter to /api/targets/ping, affecting Harbor up to 1.3.0-rc4. Several connected sources confirm the issue and describe exploitation path leading to information disclosure; a remediation cited in Snyk is to upgrade ...

CVE-2017-17697: Server-Side Request Forgery (SSRF)

The Ping function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping...

PT-2017-14957

Name of the Vulnerable Software and Affected Versions Harbor versions prior to 1.3.0-rc4 Description The issue concerns the Ping function in ui/api/target.go, which is susceptible to Server-Side Request Forgery SSRF via the endpoint parameter to "/api/targets/ping". Recommendations For Harbor...

Server Side Request Forgery (SSRF)

github.com/vmware/harbor is vulnerable to server side request forgery SSRF attacks. A malicious user can pass a malicious request to the application to the ping function in the /src/ui/api/target.go file, leading to information disclosure or arbitrary command execution...

France warns Microsoft to Stop Collecting Windows 10 Users' Personal Data

We have heard a lot about privacy concerns surrounding Windows 10 and accusations on Microsoft of collecting too much data about users without their consent. Now, the French data protection authority has ordered Microsoft to stop it. France's National Data Protection Commission CNIL issued a form...

What you need to know: Navigating EU Data Protection changes – EU-US Privacy Shield and EU General Data Protection Regulation

If youre an organization with trans-Atlantic presence that transmits and stores European citizen data e.g. employee payroll & HR data, client & prospect data in the U.S. you will want to pay attention. What we will discuss was administered under the European Unions Data Protection Directive and a...

shop.harborfreight.com XSS vulnerability

Vulnerable URL: https://shop.harborfreight.com/catalogsearch/result?q="';-- Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

The Clock is ticking for EU and US to Negotiate New Safe Harbor Deal: What You Can Do to Stay Out of Legal Limbo

European authorities have given the European Union and US officials three months to come up with an alternative to the Safe Harbor agreement after the European Court of Justice ECJ declared Safe Harbor laws invalid earlier this month. The new agreement must protect the personal data of European...

EC Ruling Invalidates Safe Harbor - Now What?

In a ruling on October 7, 2015 the European Court of Justice ECJ invalidated the principal European component of the U.S.-E.U. Safe Harbor Framework when it ruled in Schrems v. Data Protection Commissioner. In the ruling the court said that the existing U.S.-EU Safe Harbor agreement, overseen by...

Markey: GRID Act Passage Long Overdue

Representative Ed Markey D-MA is urging the Chairman of the House Committee on Energy and Commerce, Fred Upton R-MI, to take immediate action toward passing the Grid Reliability and Infrastructure Defense GRID Act, which Markey calls a bipartisan bill aimed at hardening the nation’s electrical gr...

Capitol Hill Rhetoric Takes Aim at Wrong Cybersecurity Targets

Defense secretary Leon Panetta couldn’t resist, could he? He couldn’t fight the urge to dig deep into the information security cliché handbook and yank out that old chestnut about a Cyber Pearl Harbor. Seriously, is there a more cringe-inducing, FUD-filled phrase than Cyber Pearl Harbor? Never mi...

Did The September 11th Attacks Blind Us To A Digital Pearl Harbor?

It was December 8, 2000 – the waning days of the Clinton Administration. Richard Clarke, a member of President Clinton’s National Security Council, was addressing attendees at SafeNet 2000, a conference sponsored by Microsoft Corp. that brought together computer security experts from around the...

Gene Simmons v. Anonymous : FBI raids Gig Harbor home in search of hacker who targeted Kiss frontman

Gene Simmons v. Anonymous : FBI raids Gig Harbor home in search of hacker who targeted Kiss frontman The FBI has raided the Gig Harbor home of an alleged hacker suspected in a cyber attack against Kiss bassist Gene Simmons. The October attack purportedly conducted by Anonymous – the same hacker...

Report: U.S. Is Hyping Threat Of Cyber War

A new report suggests that lawmakers, policy wonks and corporations are sensationalizing the risk of cyber attacks far beyond the actual threat. The inflation of cyber security threat, like the inflation of the threat of Communism during the Cold War, or terrorist acts in the wake of the 9/11...